
$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json)
Hash identifier: mSSGvJTXbi9X9fj3oHQp5LZSdVJKj5F5ec6g+hqptXE=
Subject key identifier: 8F:82:19:3D:A0:CA:94:F8:E7:96:73:50:07:5E:28:D1:D4:DD:84:3C
Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Certificate serial: 1CD5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
Manifest number: 1CB0
Signing time: Tue 28 Jul 2026 16:16:06 +0000
Manifest this update: Tue 28 Jul 2026 16:16:05 +0000
Manifest next update: Tue 04 Aug 2026 16:16:05 +0000
Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: V0QkxB+/jkSrqhhGEkQ2+dng7/+dRiJjJDTQ+wdT9wI=)
2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=)
3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7381 (0x1cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF
Validity
Not Before: Jul 28 16:16:05 2026 GMT
Not After : Aug 4 16:16:05 2026 GMT
Subject: CN=6a68d5c6-fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:51:36:df:a0:21:cd:c1:f0:9f:d5:0b:f5:
dc:ef:9c:6c:67:66:28:24:d8:e4:8c:86:6d:d6:58:
47:95:85:8c:04:aa:0a:7d:7d:d7:5e:e6:6c:a1:3a:
29:0d:73:09:c4:71:66:e5:e4:0c:99:77:4d:b5:80:
75:d6:42:13:c8:68:93:0c:40:1b:66:0b:26:4c:aa:
54:52:c6:58:6b:20:52:85:8c:0d:3a:ba:ce:23:ca:
4f:9d:e6:39:dc:da:aa:67:0e:ff:b2:8d:1a:2e:1d:
d1:5e:51:49:1f:6f:8b:cb:b6:bb:cf:ee:b3:29:6a:
3a:47:58:a2:0c:f5:ee:05:53:52:6b:89:91:a1:4d:
3a:35:43:1e:7c:87:a2:43:fa:b1:07:7e:34:b0:1f:
f6:86:58:29:50:b3:48:0b:a9:9d:b9:2f:21:54:7f:
9e:e8:cc:70:80:01:59:da:1d:12:20:75:45:92:c3:
0e:b5:61:01:dd:d2:69:7a:f2:f9:d0:4a:be:b4:66:
0c:8c:ff:88:fb:4f:47:8a:2b:ec:1e:13:3e:c1:6f:
b0:59:1c:15:17:d1:bf:37:62:fd:7d:7d:63:ed:82:
51:be:71:df:34:32:30:1a:e9:a8:ff:31:0f:68:4a:
32:cf:70:80:6f:d1:09:d3:30:c9:7a:c5:53:61:d7:
19:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:19:3D:A0:CA:94:F8:E7:96:73:50:07:5E:28:D1:D4:DD:84:3C
X509v3 Authority Key Identifier:
keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:b2:86:84:49:5c:d0:27:06:3b:f5:00:fb:49:ff:cb:85:
fd:c1:20:e7:e3:65:e6:04:44:be:44:3d:1e:ef:64:ee:67:41:
37:29:40:ca:d2:3d:c6:4d:ef:52:e5:60:7c:cb:49:33:73:ed:
28:11:bb:00:fe:e7:3d:cd:2b:02:78:d6:2f:1e:b3:14:10:ad:
dd:0a:bc:09:d2:b7:6b:9c:ec:d5:5f:98:97:73:9a:86:5e:e4:
e6:69:e5:13:0b:2b:11:64:bf:02:b5:11:3b:6d:d0:99:80:47:
62:72:a0:78:fb:cc:7b:36:79:ce:68:8c:83:ff:a6:1b:af:68:
62:e6:2f:af:8d:76:b1:71:00:ed:fa:56:82:f8:90:3e:c1:8d:
2c:f3:10:f3:67:a8:cc:0a:09:a2:69:37:df:2c:87:33:05:4d:
5e:49:16:43:89:12:90:2c:7b:c9:cf:92:f6:5f:24:43:b4:51:
17:2e:56:f5:52:3b:27:4d:46:b9:68:79:17:18:a3:8d:7d:5b:
31:c7:50:8c:da:0c:d0:2f:e6:de:e4:c3:a1:bf:b9:ff:89:af:
91:31:96:72:40:7c:3f:9e:93:dc:2a:f6:77:1d:85:58:b5:01:
c2:fd:ec:bb:31:a6:7c:fa:f9:cd:3d:c3:e9:79:bb:3a:80:72:
6c:ad:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:30 2026 by rpki-client